diff options
| author | Baptiste Coudurier <baptiste.coudurier@gmail.com> | 2007-03-29 10:37:07 +0000 |
|---|---|---|
| committer | Baptiste Coudurier <baptiste.coudurier@gmail.com> | 2007-03-29 10:37:07 +0000 |
| commit | 62b6498df2ef9f5fc65d581c8be48a6ff57de1e3 (patch) | |
| tree | b193021585d91a6a1d7f3b07f9a2174a9920f0ab /libavformat/mov.c | |
| parent | db56acd4801330ca25902bf23b12029b0517f1d8 (diff) | |
| download | ffmpeg-62b6498df2ef9f5fc65d581c8be48a6ff57de1e3.tar.gz | |
break if atom size is more than size left in container atom, fix shooter.mov
Originally committed as revision 8544 to svn://svn.ffmpeg.org/ffmpeg/trunk
Diffstat (limited to 'libavformat/mov.c')
| -rw-r--r-- | libavformat/mov.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/mov.c b/libavformat/mov.c index ce8afbca77..83dcdf0ec7 100644 --- a/libavformat/mov.c +++ b/libavformat/mov.c @@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom) a.size -= 8; - if(a.size < 0) + if(a.size < 0 || a.size > atom.size - total_size) break; if (c->parse_table[i].type == 0) { /* skip leaf atoms data */ |